Claims 



1 lly A method for protecting a stream of data to be 

2 transferred between an encryption unit and a 

3 decryption unit, said method comprising: 

4 A encrypting the stream of data at said encryption 

5 urmt for transferring of said encrypted stream of data 

6 from said encryption unit to said decryption unit; 

7 dynamically varying said encrypting of said 

8 stream of data at said encryption unit by changing at 

9 least one encryption parameter and signaling said 

10 change an encryption parameter to said decryption 

11 unit, said dynamically varying of said at least one 

12 encryption parameter being responsive to occurrence of 

13 a predefined condition in said stream of data; and 

14 decrypaing said encrypted data at the decryption 

15 unit, said decrypting accounting for said dynamic 

16 varying of said encrypting by said encryption unit 

17 using said changed encryption parameter. 

1 2. The method of claim 1, wherein said at least one 



2 encryption parameter comprises at least one of an 

3 encryption key, an encrvption granularity, an encryption 

4 density scale, an encryption density, an encryption delay, 

5 an encryption key update Variable, and an encryption key 

6 update data trigger. \ 
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1 3. TheWethod of claim 2, wherein said at least one 

2 encryption parWeter comprises at least some of said 

3 encryption key jT^cryption granularity, encryption density 

4 scale, encrypt^^*^ encryption delay, encryption key 

5 update variable, \ and encryption key update data trigger. 

1 4. \ The method of claim 2, further comprising 

2 multiplexing said changed encryption parameter and said 

3 encrypted tiata at a sender prior to transferring thereof to 

4 a receiyer\containing said decryption unit, and 

5 demultiple^iLng said changed encryption parameter and said 

6 encrypted dita at said receiver. 

1 5. Thd method of claim 1, wherein said dynamically 

2 varying comprises dynamically varying said encryption 

3 parameter basefl on passage of a predefined number of units 

4 of physical daOa or passage of a predefined number of 

5 conceptual units of data. 

1 6. The Wthod of claim 5, wherein said encryption 

2 parameter comi^m^s an encryption key. 

1 7. Vrhe method of claim 1, wherein said stream of 

2 data compr^es a stream of compressed data, and wherein 

3 said method Vfurther comprises decompressing said compressed 

4 data after said decrypting of said encrypted data by said 

5 decryption untt. 
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1 8.\ The method of claim 7, wherein said stream of 

2 compressed data can comprise one of MPEG encoded video 

3 data, MPEG^ encoded audio data, and Dolby AC-3 audio data. 

1 ^v. '^H^ method of claim 1, further comprising 

2 initializingX a plurality of encryption parameters based on 

3 sensitivity of said stream of data, said plurality of 

4 encryption pariameters being employed by said encrypting and 

5 wherein said coanged encryption parameter of said 

6 dynamically varmng comprises one encryption parameter of 

7 said plurality on encryption parameters. 

1 10. The method of claim 1, wherein said stream of 

2 data comprises a stream of MPEG compressed data, and said 

3 method further comprises setting a plurality of encryption 

4 parameters for use byVsaid encrypting based upon 

5 sensitivity of said stream of MPEG compressed data, and 

6 wherein said changed encryption parameter comprises one 

7 encryption parameter of \said plurality of encryption 

8 parameters. \ 

1 11. The method of claim 10, wherein said setting of 

2 said plurality of encryption parameters includes 

3 establishing at least some o^ an encryption granularity, an 

4 initial encryption key, a density scale, a density, an 

5 encryption delay, and a key update data trigger for said 

6 stream of MPEG encoded data. \ 
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12 . \ The method of claim 1, wherein said encrypting 
comprises encrypting multiple portions of said data stream, 
and wherein said dynamically varying comprises dynamically 
varying s^id encrypting of said multiple portions of said 
data stream by changing said at least one encryption 
parameter fbr each portion of said multiple portions. 

13. The method of claim 1, wherein said dynamically 
varying compikses dynamically varying said at least one 
encryption parameter responsive to passage of a predefined 
number of dataVbits in said stream of data, or 
alternatively, Vesponsive to passage of a predefined number 
of data units in said stream of data, wherein said data 
units comprise aft least one of a program, a sequence, a 
group of picturesV a picture, a slice, or a macroblock. 

14. A system\for protecting a stream of data 
comprising: \ 

an encryption unit for encrypting the stream of 
data for transfer to a decryption unit; 

means for dynamically varying said encrypting of 
said stream of data by said encryption unit by changing an 
encryption parameter anci signaling said change in 
encryption parameter to kaid decryption unit, said means 
for dynamically varying being responsive to occurrence of .a 
predefined condition in sAid stream of data; and 
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whereiVi said decryption unit decrypts said 
encrypted data, said decrypting accounting for said 
dynamic varying of said encrypting by said encryption 
unit using saVd changed encryption parameter. 
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1 15. The Wstem of claim 14, wherein said changed 

2 encryption paratneter comprises an encryption key, and 

3 wherein said means for dynamically varying comprises a 

4 dynamic encrypt i)bn\ key generator, and means for dynamically 

5 varying said encriWmbion key based on an occurrence of a 

6 predefined condition in said stream of data. 

1 16. The\ system of claim 15, wherein said stream of 

2 data comprises\ a stream of digital data. 

1 17. The sVstem of claim 14, wherein said means for 

2 dynamically varying comprises means for dynamically varying 

3 said encryption Parameter based on passage of a predefined 

4 number of units cif physical data or passage of a predefined 

5 number of conceptual units of data. 

1 18. The system of claim 14, wherein said encryption 

2 unit encrypts multible portions of the stream of data, and 

3 wherein said means nor dynamically varying comprises means 

4 for changing said encryption parameter for each portion of 

5 said multiple portior^ of said stream of data. 
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1 19. Th^ system of claim 14, wherein said at least one 

2 encryption parameter comprises at least one of an 

3 encryption keyy an encryption granularity, an encryption 

4 density scale, \an encryption density, an encryption delay, 

5 an encryption kW update variable, and an encryption key 

6 update data trigger. 

1 20. Th& system of claim 19, wherein said at least one 

2 encryption parameter comprises at least some of said 

3 encryption kevyNencryption granularity, encryption density 

4 scale, encryptiJbn density, encryption delay, encryption key 

5 update variable\ and encryption key update data trigger. 

1 21. The system of claim 14, further comprising a data 

2 multiplexer\ f or multiplexing said changed encryption 

3 parameter inVo said encrypted data for transfer thereof to 

4 said decryptdAon unit. 

1 22. The \ system of claim 14, further comprising means 

2 for setting a plurality of encryption parameters based on 

3 sensitivity of \ said stream of data, said plurality of 

4 encryption paraVneters being employed by said encryption 

5 unit and wherein said changed encryption parameter 

6 comprises one encryption parameter of said plurality of 

7 encryption parameters . 
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1 23. Tne system of claim 22, wherein said stream of 

2 data comprises a stream of compressed data, and wherein 

3 said system mrther comprises a decoder for decompressing 

4 said compressed data after decrypting thereof by said 

5 decryption. unio. 

1 24. The system of claim 23, wherein said stream of 

2 compressed data can comprise a stream of one of MPEG 

3 encoded video data, MPEG encoded audio data, and Dolby AC-3 

4 audio data. \ 

1 25. The system of claim 22, wherein said means for 

2 setting said plurality of encryption parameters includes 

3 means for establishing at least some of an encryption 

4 granularity, an encryption key, a density scale, a density, 

5 an encryption delay, and a key update data trigger. 

1 26. The system of\ claim 14, wherein said means for 

2 dynamically varying comprises means for changing said 

3 encryption parameter based on a predefined number of bits 

4 being encoded by said encryption unit, or alternatively, 

5 based on a predefined number of units being encoded by said 

6 encryption unit, said units comprising one of a program, a 

7 sequence, a group of picturies, a picture, a slice, or a 

8 macroblock. \ 

1 27. A system for protecting a stream of data to be 

2 transferred between a sender and a receiver, said system 

3 comprising: \ 
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an ehcryption unit disposed at said sender for 
encryptindr the stream of data prior to transfer to 
said receiver, feaid encryption unit being adapted to 
dynamically varA encrypting of the stream of data by 
changing -at leastt one encryption parameter based on an 
occurrence ofi a predefined condition in said data 
stream and signaling said change in encryption 
parameter to said receiver; and 

a decryption unit disposed at said receiver for 
decrypting said fencrypted data, said decryption unit 
being adapted to receive said changed encryption 
parameter to accoiint for said dynamic varying of said 
encrypting by said\encryption unit using said changed 
encryption parameter. 

28. At least one prAgram storage device readable by a 
machine, tangibly embodying at least one program of 
instructions executable by the machine to perform a method 
for protecting a stream of data to be transferred between 
an encryption unit and a decryption unit, comprising; 

6 encrypting the tetream of data at said 

7 encryption unit for transfer thereof to said 

8 decryption unit; \ 

9 dynamically varying said encrypting of said 

10 stream of data at said encryption unit by changing an 

11 encryption parameter and signaling said change in 

12 encryption parameter to said decryption unit, wherein 
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13 said d^Joiainically varying of said encryption parameter 

14 is respctosive to occurrence of a predefined condition 

15 in said ktreaiu of data; and 

16 decrypting said encrypted data at the 

17 decryption uhit, said decrypting accounting for said 

18 dynamic varying of said encrypting by said encryption 

19 unit using sai)^ changed encryption parameter, 

1 29. The at leaAt one program storage device of claim 

2 28, wherein said encryption parameter comprises at least 

3 one of an encryption key, an encryption granularity, an 

4 encryption density scale, an encryption density, an 

5 encryption delay, an encryption key update variable, and an 

6 encryption key update data trigger. 

1 30. The at least one program storage device of claim 

2 29, wherein saidXat least one encryption parameter 

3 comprises at leas^^^ome of said encryption key, encryption 

4 granularity, encrTOtion density scale, encryption density, 

5 encryption delay, \^^^cji?Ypt ion key update variable, and 

6 encryption key update data trigger. 



1 31. Vrhe at least one program storage device of claim 

2 29, wherein said method further comprises multiplexing said 

3 changed encryption parameter and said encrypted data at a 

4 sender prion to transferring thereof to a receiver 

5 containing said decryption unit, and demultiplexing said 

6 changed encryiption parameter and said encrypted data at 

7 said receiver. 
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1 32. The\ at least one program storage device of claim 

2 28, wherein skid dynamically varying comprises dynamically 

3 varying, said encryption parameter based on passage of a 

4 predefined nximtter of units of physical data or passage of a 

5 predefined number of conceptual units of data. 

1 33. The at least one program storage device of claim 

2 32, wherein^eaid encryption parameter comprises an 

3 encryption! HteW 

1 341 The at least one program storage device of claim 

2 28, whenein said stream of data comprises a stream of 

3 compressed data, and wherein said method further comprises 

4 decompreasing said compressed data after said decrypting of 

5 said encrm^ted data by said decryption unit. 

1 35. "me at least one program storage device of claim 

2 34, wherein\said stream of compressed data can comprise one 

3 of MPEG encoped video data, MPEG encoded audio data, and 

4 Dolby AC-3 audio data. 

1 36. The y t least one program storage device of claim 

2 28, wherein saAd method further comprises initializing a 

3 plurality of encryption parameters based on sensitivity of 

4 said stream of data, said plurality of encryption 

5 parameters being ^mployed by said encrypting and wherein 

6 said changed encryption parameter of said dynamically 

7 varying comprises ®ne encryption parameter of said 
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8 plurality of encryption parameters. 

1 37. Vrhe at least one program storage device of claim 

2 28, wherein said stream of data comprises a stream of MPEG 

3 compressed. Gata, and said method further comprises setting 

4 a plurality of encryption parameters for use by said 

5 encrypting based upon sensitivity of said stream of MPEG 

6 compressed data, and wherein said changed encryption 

7 parameter comprises one encryption parameter of said 

8 plurality of encryption parameters. 

1 38. The aV least one program storage device of claim 

2 37, wherein saidNtsetting of said plurality of encryption 

3 parameters includes establishing at least some of an 

4 encryption granularity, an initial encryption key, a 

5 density scale, a density, an encryption delay, and a key 

6 update data trigger tor said stream of MPEG encoded data. 
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